Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
File: oixSeMS7sCbhL_12C-rFn8FV_CU.mft (raw, json)
Hash identifier: iTL+i6BUe+WRqG464LJF3Yi9snWAVzP9N7WPJhsqjTw=
Subject key identifier: A0:3B:E7:B1:1A:AA:F2:37:DD:4A:79:8A:89:E4:0C:AD:43:07:AD:3E
Authority key identifier: A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25
Certificate issuer: /CN=a22c5278c4bbb026e12ffd760beac59fc155fc25
Certificate serial: 01974666A2BAE8EB5D76047AD3AC4BFE65C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
Manifest number: 09E7
Signing time: Fri 06 Jun 2025 18:00:20 +0000
Manifest this update: Fri 06 Jun 2025 18:00:20 +0000
Manifest next update: Sat 07 Jun 2025 18:00:20 +0000
Files and hashes: 1: P8h8nlnz4dD4fkTghoS9unFyKig.roa (hash: MYpmJNo5HIfucuzKcNdlv0aQadbbtMqL8vbh/XHclWY=)
2: oixSeMS7sCbhL_12C-rFn8FV_CU.crl (hash: gyVUyUtLvqTr4Hc3zQnXiLhqBaeQ7VKjdCrPyIolxrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:a2:ba:e8:eb:5d:76:04:7a:d3:ac:4b:fe:65:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c5278c4bbb026e12ffd760beac59fc155fc25
Validity
Not Before: Jun 6 18:00:20 2025 GMT
Not After : Jun 7 18:00:20 2025 GMT
Subject: CN=a03be7b11aaaf237dd4a798a89e40cad4307ad3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:3b:90:68:f5:2d:a9:a1:21:17:d8:74:42:
e5:4f:2e:eb:f2:1a:41:75:ec:08:f5:af:b9:54:7b:
ce:5d:c7:20:2b:ec:17:d5:50:4c:15:73:91:b4:70:
05:ed:8d:29:a5:b1:24:aa:2c:bd:32:8b:4d:b7:1d:
d5:53:8a:46:24:35:48:df:20:94:3a:ce:57:36:31:
94:68:41:69:9c:c8:5c:48:c5:a5:ab:9c:06:1a:a3:
01:dc:20:bf:e0:60:55:05:c4:2c:5b:f2:ea:53:b5:
ea:3b:2c:82:de:fe:56:75:a0:cf:f8:f1:e2:0b:aa:
6c:b7:6f:20:07:06:48:bd:ad:93:ee:0f:31:2c:8f:
3e:62:0f:6e:8b:c0:b6:33:0c:96:fc:4f:19:35:32:
1b:bb:40:52:43:4f:74:d6:a3:cc:02:a5:a1:8b:6e:
b5:ff:2c:ec:1d:71:54:90:8d:dc:27:c5:6b:76:ed:
b7:8e:16:0c:2a:4e:bb:aa:43:8d:f9:85:70:5e:f7:
d6:c2:b0:b5:41:ae:73:ba:d5:12:cb:e3:77:06:ed:
3b:aa:ad:64:b8:e7:9b:4b:5a:f5:ba:5f:b2:52:6d:
a8:d7:54:83:3c:40:92:f8:15:18:6e:d5:e0:10:e1:
88:bb:c1:83:ab:17:21:c5:0e:3c:cc:8e:8c:77:fa:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3B:E7:B1:1A:AA:F2:37:DD:4A:79:8A:89:E4:0C:AD:43:07:AD:3E
X509v3 Authority Key Identifier:
keyid:A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a0:16:65:78:87:10:3b:bc:eb:fc:87:82:31:ba:f3:9a:3b:
29:33:c0:80:78:88:ca:68:cf:a0:67:29:39:a5:95:2a:e3:b0:
1a:14:f4:2e:af:a6:68:57:e2:0e:74:a3:3a:96:46:bc:f8:8f:
f9:30:de:d6:19:a8:fb:0a:78:6b:1e:27:91:ad:6a:99:49:79:
54:eb:fb:b5:7e:54:a6:29:25:46:56:63:cf:7e:c2:31:d7:4e:
59:54:de:3f:b6:91:1d:e6:14:c5:f2:ca:d9:0b:bc:2e:5a:d9:
cd:aa:91:bb:c8:88:ee:77:87:a1:a6:a6:62:92:99:55:27:9c:
b6:e2:b7:74:b4:cf:56:aa:82:15:89:65:51:9a:a7:44:95:d5:
36:c6:a1:b7:20:1a:33:33:b8:24:48:34:e9:6e:bd:63:91:1c:
61:07:e1:c2:bd:38:3e:8b:49:58:ab:09:db:ef:e5:34:35:3a:
c5:61:10:b1:b5:52:80:87:c6:69:f3:12:8b:af:59:47:1a:c6:
fe:44:32:b5:0e:3b:d9:af:39:0a:5a:29:25:84:41:93:c1:bd:
25:1a:35:be:8a:f5:24:c1:4a:e1:ac:ab:8f:6f:e5:97:c5:5b:
55:bb:a8:9c:23:e1:aa:5b:30:1c:99:91:dc:60:27:a5:49:fa:
c9:08:db:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:29 2025 by rpki-client